Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/BKpr3bPRAhnf76g0R7hKS7XlYGo.roa
File: BKpr3bPRAhnf76g0R7hKS7XlYGo.roa (raw, json)
Hash identifier: sOJuG/ZE2t/BVgQu3C13m4ow3/k6AmyURHusE5zF9Fk=
Subject key identifier: 04:AA:6B:DD:B3:D1:02:19:DF:EF:A8:34:47:B8:4A:4B:B5:E5:60:6A
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01964551CAF61E3DD5D772312F8B52924291
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/BKpr3bPRAhnf76g0R7hKS7XlYGo.roa
Signing time: Thu 17 Apr 2025 19:55:10 +0000
ROA not before: Thu 17 Apr 2025 19:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
81.22.193.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.109.0/24 maxlen: 24
95.215.110.0/23 maxlen: 23
185.42.26.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:51:ca:f6:1e:3d:d5:d7:72:31:2f:8b:52:92:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 17 19:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04aa6bddb3d10219dfefa83447b84a4bb5e5606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:94:6d:9d:9d:94:cd:d1:26:69:af:62:7e:
c6:1d:9d:fa:c6:06:40:34:b4:20:cd:05:cb:8c:e9:
44:62:ea:56:66:aa:45:c3:31:2b:64:de:06:5e:c4:
e8:7a:58:ec:6f:9e:ef:02:b1:c5:d8:38:8f:b4:c2:
69:10:a8:ee:3c:b2:b9:8d:60:3a:c5:83:ab:a2:22:
33:ae:2f:52:01:78:d4:bf:45:4f:68:b9:52:26:79:
3c:09:98:99:c7:b0:d5:ef:0f:4c:83:d5:57:e2:ac:
d1:64:34:29:49:fb:e8:59:8a:85:52:b4:ee:77:f1:
4b:45:10:bb:db:89:e5:0a:88:7f:9e:bb:20:aa:60:
6f:b3:1b:b7:59:d1:f5:05:2e:62:97:c7:78:64:86:
e9:2b:2b:df:c7:b8:f3:3c:69:a6:61:24:f4:be:d9:
d0:fb:c8:ea:fb:eb:a7:86:ac:74:cb:72:72:04:bd:
9a:8f:d0:64:a1:66:28:e7:02:f7:3a:3f:e9:7a:38:
c1:44:3f:f6:7c:1a:00:e2:fa:cd:cd:e8:ed:3e:82:
b8:c0:19:84:09:fd:be:95:f1:17:2f:67:c6:05:8a:
56:7a:b9:1d:bd:3e:5c:27:5b:37:4d:58:a6:aa:3a:
79:dd:e0:08:06:03:08:2e:3c:85:ba:c9:ef:48:26:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:6B:DD:B3:D1:02:19:DF:EF:A8:34:47:B8:4A:4B:B5:E5:60:6A
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/BKpr3bPRAhnf76g0R7hKS7XlYGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
81.22.193.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.42.26.0/24
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
91:d3:f1:d3:ab:7c:b9:02:1c:1e:18:fa:ec:ec:3b:fe:f3:42:
e5:be:ca:19:f2:1e:46:d1:88:c2:20:7a:c7:2b:22:09:2b:8c:
47:4f:66:d2:22:9b:23:0d:3e:dd:31:15:5f:56:bc:06:97:02:
59:4e:0d:7c:75:e0:a9:ff:de:db:bf:68:16:af:f2:4f:9b:a3:
ea:d5:93:b8:22:d1:45:7a:65:74:0f:4a:34:08:c5:b7:bf:65:
d5:08:2b:9f:fd:e5:ae:4b:93:fc:50:78:06:97:4b:65:eb:b0:
07:eb:bf:70:99:80:56:7f:da:13:c0:4c:92:a1:70:4f:bb:21:
6f:9f:a6:c5:fb:e9:2e:e6:b5:78:d1:9f:af:8b:2a:5d:61:5c:
6e:a1:2f:c2:a2:10:e0:9b:17:53:96:ab:14:d9:84:86:3b:a0:
d4:1e:9d:08:91:11:22:58:04:62:37:2e:e1:43:81:4a:ca:37:
4b:fe:d2:ea:85:db:0e:7d:80:a0:82:f8:0d:02:43:a9:f4:39:
bf:21:6b:76:42:2d:32:61:e7:7b:37:9c:5a:f5:35:84:55:a7:
05:ad:f3:0f:be:ba:8b:f6:26:d5:8f:47:d2:8e:57:21:a4:22:
55:7b:9a:f6:fc:25:65:8b:2a:90:7b:96:7b:eb:3b:7d:28:0a:
2d:3d:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:12:12 2025 by rpki-client